-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 18 Apr 2021 10:03:02 +0200 Source: leptonlib Architecture: source Version: 1.76.0-1+deb10u1 Distribution: buster Urgency: medium Maintainer: Jeff Breidenbach <jab@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 985089 Changes: leptonlib (1.76.0-1+deb10u1) buster; urgency=medium . * Non-maintainer upload by the LTS Team. (Closes: #985089) * CVE-2020-36277 denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c * CVE-2020-36278 heap-based buffer over-read in findNextBorderPixel in ccbord.c * CVE-2020-36279 heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c * CVE-2020-36280 heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c. * CVE-2020-36281 heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c Checksums-Sha1: 68a6cdaf0732ea26073325487c1ee6aa9dc438d5 2135 leptonlib_1.76.0-1+deb10u1.dsc 56f0f0f059f158dd92e9a46343dca7cfa5b0ad39 7932 leptonlib_1.76.0-1+deb10u1.debian.tar.xz 4a689ae59295fc390e350e25f263770504366cad 7622 leptonlib_1.76.0-1+deb10u1_amd64.buildinfo Checksums-Sha256: 6a5ecd2fd3e1d758b6e38d65a209a3db363d3309c39153485a37f6595037e60b 2135 leptonlib_1.76.0-1+deb10u1.dsc 3dc370ff39359c9886c89f3f1059cf4d5627c6c42c4dba73aafca4dac98ae4fb 7932 leptonlib_1.76.0-1+deb10u1.debian.tar.xz 2ad0339b2cd5f152c66a7bc2769ef44bc278ae4fa4e32d461217736c22338da8 7622 leptonlib_1.76.0-1+deb10u1_amd64.buildinfo Files: d69b0f77a60cd4a02e2673e771b8dba7 2135 graphics optional leptonlib_1.76.0-1+deb10u1.dsc e9e6ce12df71f5cf2c41b560a36ada7b 7932 graphics optional leptonlib_1.76.0-1+deb10u1.debian.tar.xz 222751f864b207a7381141b79b5443c6 7622 graphics optional leptonlib_1.76.0-1+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmGz7DpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRwOFEACrXMbOJlNO8dbul+r0MQ37OekGHnUl UmV2JkSvtEQ+ZFcqA6jDDAhwdM9JQO7BoSm2H/lLlFWdENLCcqSaEVLlqubjpgkI D/88XE1h1eT+rg4b1RI3nS7bzFFff3chfj76IukwWyjgZbI84tqg0RfK0qeUgr5/ DqUdZZQCiePGyKaSnMYHmqNn6+BwO4hCWX7DPMQWMlbnUytRSgYenGH+668xl6EY e7bDVRitOJsnzoVrgDHlEZ5yGhO+BTR4RFjyUzLCg5f8t3PuO1ZFD95h61uI+9kQ LDuAioN2AbEwYfkn7Szlcq2HhFxHSpxMcX365thdRt+xNWZNN9wYfSLriLOB+GTV tSpFMyGcva8k4NY4KLrhSH6Q7GkRbKx+snVO3/iGJnF2sOwjwIkJsMMuiWTVx3x8 t5uqVz/UGD6AJ9bjkRH6gPiLsO9f3UNia3X76j2OWSaQK8tPP5RvVdDrl6N7qFYS rMrP5clisYyHN/s+v4f7SryxGqV8fYJArf193ELK5yqTJup7EsmKWMft37jGmqxw dICt6eicyDuzwXAiwOn4dJ2BbeZ7wymPaDR8U3x5SnFtSVpQHLz8PcZYiQsLrPwk K+aUgLK+IfzbjFPNixSg3QCjZEW+eD5SRWxwbbR/0i2JDZfX30gDk96VhBdHVSGv vvUIBksHIUTKMQ== =AKZU -----END PGP SIGNATURE-----
